$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: F9iqEKlb06qYL44ZgZgpTW2MARujPkZkhDnFqNRpxXQ= Subject key identifier: F7:63:30:B0:5A:C0:76:43:F3:B6:75:AC:EE:DB:AF:F6:85:6F:91:B0 Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 4CDA6F1B03B70C4F858F806CD28EB0A5E4A1A0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 0439 Signing time: Mon 20 Oct 2025 18:07:24 +0000 Manifest this update: Mon 20 Oct 2025 18:07:24 +0000 Manifest next update: Fri 24 Oct 2025 18:07:24 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: op2SzqLc46naTqu8XcKLDEAdNvvH35hKx32Dg/skh/A=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: 1S3KJ3fnyzQhl2CB002Ub+7pEa51Ld22C8H/Cgr1c9M=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: VjD1WJDBEJ6jM21ka0Mb4aXd4QHD9XIuUxbxMPiUcFY=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: 3xw0HLqYnhw8nlGCY46G2OOB3Vvab+9E1+ZtO3U7q7s=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:da:6f:1b:03:b7:0c:4f:85:8f:80:6c:d2:8e:b0:a5:e4:a1:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Oct 20 18:07:24 2025 GMT Not After : Oct 24 18:07:24 2025 GMT Subject: serialNumber=4a2f16cf6d3ca421c3c78de352637094e220583e0856c945f43ef05cc1360a1a, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:ab:62:c1:29:e4:d8:ca:2e:a3:e6:40:32: d4:7a:da:08:68:46:5b:ef:3f:e1:95:93:7c:c4:8d: ce:47:a6:8e:ab:49:4f:d1:b8:ed:2a:1c:32:94:2d: bd:c8:97:fb:02:0f:9f:13:da:66:e4:a8:3e:9a:80: 70:00:89:e2:fa:4a:28:25:cf:53:92:80:cf:31:46: 41:85:e0:67:96:ec:8d:9e:1c:b3:77:1e:6b:3b:22: 36:4f:99:68:03:ca:98:fe:9d:08:46:8b:3e:da:d3: fe:5d:e7:df:96:be:95:05:ee:90:37:17:ed:79:1f: 66:4f:6e:8a:39:eb:a2:63:3b:de:e9:84:d3:ea:13: 31:39:ff:1a:41:ed:9a:e3:63:11:28:37:25:b7:1f: ae:10:00:19:9f:3a:76:0e:6e:ad:c8:ac:e4:af:34: f3:eb:b8:d0:09:34:4f:e4:60:3d:2b:3d:23:a2:08: 13:10:95:29:f0:a6:4a:46:d0:52:f8:6b:13:34:39: 01:b5:10:0a:ea:43:3b:2c:cf:ec:11:61:d6:f8:8e: fd:e5:af:f3:71:17:04:4d:8a:63:24:55:70:1f:b2: 1d:5d:85:0a:7c:37:e4:39:28:6d:5c:b5:6c:d0:81: a3:9b:3e:ba:2c:2d:f3:a7:9c:aa:cc:f3:d5:35:18: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:63:30:B0:5A:C0:76:43:F3:B6:75:AC:EE:DB:AF:F6:85:6F:91:B0 X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:85:45:73:d4:92:34:90:4b:2a:b9:0f:a8:29:f3:d0:14:d7: 19:2e:79:1f:2f:dc:14:41:e9:b3:47:eb:da:6a:67:a5:92:c1: bd:43:c5:82:fb:ff:14:24:96:8b:fe:bd:97:50:16:25:85:6c: 97:ab:a0:9f:42:23:89:4e:40:44:e1:a4:88:8a:74:44:e8:90: 4e:7c:0d:38:41:1b:1b:21:55:83:9b:48:f1:87:18:e1:d2:18: 58:6d:b7:d8:b4:fe:7c:d2:fd:94:af:d9:43:c1:8c:59:b9:16: e1:a7:2b:1e:59:7f:74:c9:55:b5:7f:7e:23:bc:cb:9e:4f:50: 1e:d6:3c:23:cf:c7:66:e4:05:e6:56:25:9d:75:a3:0a:c4:30: 3f:b8:a9:66:8b:e0:4e:b3:dc:81:c8:da:a4:b0:c4:e2:a9:41: 01:a6:9b:d6:aa:97:c2:44:51:90:1c:14:23:a2:fd:9b:c3:88: ef:40:ac:18:95:fe:44:df:ca:5e:2b:db:82:8b:8e:d1:e5:83: b0:31:46:a6:7a:1e:51:f6:e7:f4:d2:61:8d:dc:3f:4a:9b:c0: 5b:b9:d2:02:4d:43:05:a2:c2:b8:e3:cf:8e:b8:4d:6c:0b:b9: b0:b4:40:5a:f8:e8:19:58:4b:ba:20:d6:49:ab:29:c9:74:1d: aa:b3:41:da -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUTNpvGwO3DE+Fj4Bs0o6wpeShoOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUxMDIwMTgwNzI0WhcNMjUxMDI0MTgwNzI0 WjB6MUkwRwYDVQQFE0A0YTJmMTZjZjZkM2NhNDIxYzNjNzhkZTM1MjYzNzA5NGUy MjA1ODNlMDg1NmM5NDVmNDNlZjA1Y2MxMzYwYTFhMS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXyKtiwSnk2Mouo+ZAMtR62ghoRlvvP+GVk3zEjc5Hpo6r SU/RuO0qHDKULb3Il/sCD58T2mbkqD6agHAAieL6Siglz1OSgM8xRkGF4GeW7I2e HLN3Hms7IjZPmWgDypj+nQhGiz7a0/5d59+WvpUF7pA3F+15H2ZPboo566JjO97p hNPqEzE5/xpB7ZrjYxEoNyW3H64QABmfOnYObq3IrOSvNPPruNAJNE/kYD0rPSOi CBMQlSnwpkpG0FL4axM0OQG1EArqQzssz+wRYdb4jv3lr/NxFwRNimMkVXAfsh1d hQp8N+Q5KG1ctWzQgaObProsLfOnnKrM89U1GIv/AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU92MwsFrAdkPztnWs7tuv9oVvkbAwHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKhUVz 1JI0kEsquQ+oKfPQFNcZLnkfL9wUQemzR+vaamelksG9Q8WC+/8UJJaL/r2XUBYl hWyXq6CfQiOJTkBE4aSIinRE6JBOfA04QRsbIVWDm0jxhxjh0hhYbbfYtP580v2U r9lDwYxZuRbhpyseWX90yVW1f34jvMueT1Ae1jwjz8dm5AXmViWddaMKxDA/uKlm i+BOs9yByNqksMTiqUEBppvWqpfCRFGQHBQjov2bw4jvQKwYlf5E38peK9uCi47R 5YOwMUameh5R9uf00mGN3D9Km8BbudICTUMFosK448+OuE1sC7mwtEBa+OgZWEu6 INZJqynJdB2qs0Ha -----END CERTIFICATE-----Generated at Mon Oct 20 23:30:33 2025 by rpki-client